Lucene search
Ubuntu.comUB:CVE-2013-5674HistorySep 16, 2013 - 12:00 a.m.
CVE-2013-5674
2013-09-1600:00:00
ubuntu.com
ubuntu.com
9
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.0%
badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle
an object obtained by unserializing a description of an external badge,
which allows remote attackers to conduct PHP object injection attacks via
unspecified vectors, as demonstrated by overwriting the value of the userid
parameter.
Related
prion
prion
Design/Logic Flaw
2013-09-16 13:02:00
veracode
veracode
Remote Code Execution (RCE) Through Deserialization
2017-07-07 10:32:10
cve
cve
CVE-2013-5674
2013-09-16 13:02:00
packetstorm
packetstorm
Moodle CMS 2.5.0-1 Cross Site Scripting
2013-09-16 00:00:00
nessus
nessus
Moodle 'external.php' 'badge' Parameter XSS
2013-09-20 00:00:00
securityvulns
securityvulns
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
77.0%
Related for UB:CVE-2013-5674